Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
File: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json)
Hash identifier: YJRJw27Em3Iofcv7uHq6kxPwH57Bjn/l1D3tp4DdusQ=
Subject key identifier: 2B:21:24:75:6C:C7:41:4C:EB:4E:55:71:B9:BB:B4:E3:3A:F9:FF:AD
Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
Certificate issuer: /CN=f7b069d33df1225a8b3643a01364f279df40d877
Certificate serial: 019DCFABB52E4AB459DBB4BAA53AFD2697C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
Manifest number: 05D3
Signing time: Mon 27 Apr 2026 16:00:29 +0000
Manifest this update: Mon 27 Apr 2026 16:00:29 +0000
Manifest next update: Tue 28 Apr 2026 16:00:29 +0000
Files and hashes: 1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: kGfJPwHm+cbA57wWp6moaWmaA4szzamKtS+P59hZDLE=)
2: xhl0o4V6-hvD85CUbuSTASM7Pe8.roa (hash: UOzsj8ZtwxxJK1k4oeGehyFJR/EivykYvRbt7Q6K/PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ab:b5:2e:4a:b4:59:db:b4:ba:a5:3a:fd:26:97:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877
Validity
Not Before: Apr 27 16:00:29 2026 GMT
Not After : Apr 28 16:00:29 2026 GMT
Subject: CN=2b2124756cc7414ceb4e5571b9bbb4e33af9ffad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:f5:74:46:9b:d1:42:bf:f8:e2:e5:c3:f4:
44:97:80:ed:bf:9b:9b:89:e9:d9:6f:0e:2f:9c:c4:
f4:77:54:d5:7f:fb:27:02:75:24:ef:76:e7:b7:56:
40:72:17:b9:e1:e7:77:9f:89:cf:4b:b1:d2:9e:49:
59:ec:41:5f:64:9b:f3:b7:6f:86:96:22:e6:2f:97:
5f:fa:53:82:20:65:5f:82:f4:c7:d9:e1:c2:59:17:
c2:fb:9f:22:fe:dd:39:9c:43:2f:20:a8:c0:0e:d1:
f3:ef:3f:cf:79:f6:81:3f:e2:6d:53:5a:3c:04:1b:
a4:27:dc:27:92:0c:c2:09:74:83:1c:80:b7:ee:55:
8a:3c:bd:f8:f7:c4:a4:40:0f:00:fc:85:f7:34:19:
1b:b5:4b:5a:81:0e:b6:01:a8:6a:92:f7:28:2a:1b:
1e:f1:33:a8:69:8f:66:2f:1b:24:58:10:b1:ce:b2:
43:df:14:b8:da:3a:a4:57:40:2f:98:c8:d9:d9:64:
35:a0:81:71:db:20:cf:e3:d1:df:ca:e6:65:47:44:
fa:db:4b:a5:44:b1:53:ce:0b:e6:77:7f:bf:cc:a8:
b6:cb:5a:28:04:0c:78:82:1c:cf:c1:a8:e8:b3:2c:
d8:14:d7:4e:a1:b5:92:46:ab:05:64:57:30:88:2a:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:21:24:75:6C:C7:41:4C:EB:4E:55:71:B9:BB:B4:E3:3A:F9:FF:AD
X509v3 Authority Key Identifier:
keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:85:2c:f3:dc:6c:3b:66:a8:39:88:98:3f:ae:b5:18:ad:c4:
3a:60:89:84:16:b6:08:a3:fe:f3:c1:ae:20:40:9c:67:aa:c6:
a1:72:bd:e1:63:fd:8b:68:58:e2:5f:82:fa:d5:14:8a:39:02:
ec:4c:56:01:53:83:80:6a:d3:e9:56:23:57:b3:39:d8:54:fe:
6e:df:3c:8f:19:9a:6b:a8:7e:a3:80:92:9d:ae:ae:42:75:63:
d0:b5:18:96:86:c1:45:d2:67:3e:f1:2c:ee:5d:ae:e7:cc:46:
71:f7:53:b8:b9:65:83:cb:08:4e:5c:4c:b0:e9:28:f3:9c:7f:
d9:4a:fc:46:e3:f7:60:aa:ee:5b:7a:0f:1b:c4:93:c7:4e:75:
db:5f:d1:9c:80:4e:95:db:75:bb:a9:7e:53:15:04:1e:83:13:
93:75:5e:85:27:6e:3e:37:31:99:ba:7a:70:70:d6:d1:9a:40:
2b:2b:2a:4c:42:99:40:05:10:3e:b2:0f:33:5a:d0:41:53:f4:
4d:f0:b6:85:8f:f9:6f:e4:ad:7a:cc:12:d3:96:86:c2:91:fa:
69:92:70:f9:4e:00:68:07:14:11:36:98:81:70:f7:6b:6a:81:
4f:8c:1a:49:35:72:a1:c5:2d:30:08:9e:7b:29:3e:c8:61:cd:
e7:97:ad:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:44:53 2026 by rpki-client